This community guide collects recommendations for improving security and privacy on macOS.
Open source
24 alternativesLinux Hardening
This guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.
About Linux Hardening
Linux Hardening is a personal guide by the author @blakkheim that lists the changes they make to a fresh install of Arch Linux for security hardening, along with other settings they find useful. The page explains the author's reasons for choosing Arch from a security standpoint, including its minimal base install, its handling of kernel updates, and the Arch Build System. The detailed sections in the excerpt cover disk layout, including full disk encryption with LVM and mount options such as noexec and nodev for /var, /home, /tmp and /dev/shm.
The author states that most changes should work on any reasonably up-to-date Linux distribution, but that the setup is not one-size-fits-all. The excerpt shows only the disk layout section in full. The table of contents lists further topics, such as the firewall, sudo, and application sandboxing, but the excerpt does not describe their contents. The page was last updated 05/19/2026. The source does not state any pricing, and the guide is not listed as open source.
Key features
- Disk layout guidance using full disk encryption with LVM
- Example fstab entries setting noexec and nodev flags on /var and /home
- Example tmpfs entries locking down /tmp and /dev/shm with noexec and nodev
- Explanation of why the Arch Build System makes packages transparent and easy to rebuild
- Table of contents covers Pacman, kernel options, firewall, sudo, and application sandboxing
- Sections on RFKill for disabling WiFi and Bluetooth, NTP, and PulseAudio
Best for: Linux users, especially on Arch, who want a documented example of hardening a desktop system and the reasoning behind each setting.
Good for
- Gives the reasons behind each recommendation, not only the settings
- Includes concrete fstab examples for the disk layout section
- States that most changes should apply to other reasonably current Linux distributions
Watch out for
- The author states it is not a one-size-fits-all setup
- Partition sizes in the disk layout example are described as examples that may need adjustment
- Only the disk layout section is shown in detail in the excerpt
Linux Hardening at a glance
- Category
- Privacy & Security › Desktop & OS Privacy
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux, Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Linux Hardening alternatives
Tools and sites you could use instead, ranked by how closely they match.
Tracee monitors runtime security events and supports forensic analysis with eBPF instrumentation.
Qubes OS is a free, open-source operating system for personal computers that uses compartmentalization as a security approach.
Follow this evolving guide for steps and configuration examples to secure a Linux server.
Set USB device authorization rules with USBGuard, a framework for controlling device access.
Open source
24 alternatives
Authorize binary execution and file access on macOS with Santa, a system extension and policy tool.
Open source
24 alternativesPopular in Desktop & OS Privacy
Well-known listings from the same topic.
wBlockapps.apple.com/app/wblock/id6746388723uBO Lite Safariapps.apple.com/app/ublock-origin-lite/id674534…Stayapps.apple.com/app/stay-for-safari/id1591620171Lockdown Privacylockdownprivacy.comTor Browsertorproject.orgFirejailfirejail.wordpress.com
Linux Hardening FAQ
Do the changes only work on Arch Linux?
The guide targets Arch, but the author states that most of the changes should work on any reasonably up-to-date Linux distribution.
What do the noexec and nodev flags do?
The author says noexec disallows execution of binaries on a mount point, and nodev prevents interpreting character or block special devices on it.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.